Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: psy7BzEiX4kBWVt09GTxAiJf6VfkbJDt27XlD9c6AzY=
Subject key identifier: 13:1D:98:67:63:9E:C7:43:35:B9:B4:8D:10:81:44:F6:F9:10:A3:C4
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019D3866A0EDD3E87E1654697BF2AA29FA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 142F
Signing time: Sun 29 Mar 2026 07:02:23 +0000
Manifest this update: Sun 29 Mar 2026 07:02:23 +0000
Manifest next update: Mon 30 Mar 2026 07:02:23 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: cSKxDLAe553IJz9t9XlY47HJ33rGq5lcAepyAmCEqSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a0:ed:d3:e8:7e:16:54:69:7b:f2:aa:29:fa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Mar 29 07:02:23 2026 GMT
Not After : Mar 30 07:02:23 2026 GMT
Subject: CN=131d9867639ec74335b9b48d108144f6f910a3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:3a:1d:99:a2:28:d6:1e:d5:3d:04:6a:2e:
fb:51:08:56:1f:5c:33:10:10:87:0b:48:b3:88:b6:
87:ba:71:1b:cd:7c:7d:e1:d3:98:e4:c4:45:c0:8c:
b0:0e:e7:81:41:5a:c7:8a:78:ec:d5:62:61:96:64:
e0:f8:17:b6:cc:b9:fd:87:ab:d7:d4:97:b7:7c:14:
ce:67:02:b9:bb:2c:4c:f1:6e:a0:1b:8d:50:62:e3:
66:cb:3b:98:22:ea:fd:06:d2:33:4b:f0:a0:6e:df:
4e:25:c6:24:b3:25:66:d1:e2:aa:5f:87:aa:8c:4c:
f4:59:55:40:13:52:a1:3c:8e:c4:b5:7d:53:10:b3:
3f:e5:16:bb:80:a0:41:1d:13:1d:47:9e:42:60:65:
47:e1:d1:33:24:65:25:b4:7e:10:e0:f2:ef:bd:cf:
b4:f0:bc:ef:4d:ba:32:cb:ce:16:14:06:17:4e:ad:
a0:e8:8d:1c:f5:df:71:81:c4:ad:3f:2e:02:ae:1e:
4d:af:5a:9d:a0:ff:1f:fd:b6:ca:ce:34:51:a4:ef:
bc:20:82:00:07:ee:f9:28:a3:da:06:c1:d3:20:33:
5c:37:85:2d:d5:6e:31:35:30:f6:55:ae:8d:0b:11:
e4:e4:b4:e3:81:50:96:81:09:0f:50:bb:5d:ca:f4:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:98:67:63:9E:C7:43:35:B9:B4:8D:10:81:44:F6:F9:10:A3:C4
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:43:52:c9:25:a7:8a:bc:e9:5a:fb:d4:5f:da:13:cc:0a:
f3:57:2b:e9:cb:e1:6b:5e:07:70:fe:05:90:0a:63:8f:22:00:
bd:b5:6b:a1:d3:ec:41:af:e9:e7:13:2f:75:90:18:ed:2e:66:
3c:62:86:98:1e:62:f2:53:e5:86:b7:8c:f8:3d:93:d2:6a:64:
01:73:bf:fa:24:1e:a8:66:24:1d:08:27:48:c4:e4:11:5b:06:
5a:39:1f:05:64:c6:71:21:7c:40:a4:de:3a:1c:cd:11:4c:42:
dc:c1:ae:81:b0:e9:3c:7f:da:ef:8f:3a:86:5c:fb:ac:b3:99:
45:9a:5c:a9:33:27:64:7c:36:36:2c:11:97:05:38:b1:6c:05:
2f:9c:17:98:5f:de:14:bc:f4:eb:34:e1:91:03:84:83:a4:3d:
c3:05:ef:f4:5e:3b:7d:4e:0b:8d:1a:2c:ae:42:14:56:fc:31:
a0:47:3d:36:bc:1b:14:61:bc:24:9f:69:13:e6:f6:fe:b3:fc:
ad:9d:83:71:f2:b8:b9:a5:d3:c4:a2:7a:98:bd:39:57:61:8b:
b0:8a:e7:d8:75:42:99:c1:a5:b3:40:59:ed:31:27:2f:16:77:
06:9e:ed:99:aa:83:c8:57:49:cd:ed:11:f6:0e:f6:d6:a9:63:
be:79:95:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZqDt0+h+FlRpe/KqKfpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2
ZTJmMDgwHhcNMjYwMzI5MDcwMjIzWhcNMjYwMzMwMDcwMjIzWjAzMTEwLwYDVQQD
EygxMzFkOTg2NzYzOWVjNzQzMzViOWI0OGQxMDgxNDRmNmY5MTBhM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Os6HZmiKNYe1T0Eai77UQhWH1wz
EBCHC0iziLaHunEbzXx94dOY5MRFwIywDueBQVrHinjs1WJhlmTg+Be2zLn9h6vX
1Je3fBTOZwK5uyxM8W6gG41QYuNmyzuYIur9BtIzS/Cgbt9OJcYksyVm0eKqX4eq
jEz0WVVAE1KhPI7EtX1TELM/5Ra7gKBBHRMdR55CYGVH4dEzJGUltH4Q4PLvvc+0
8LzvTboyy84WFAYXTq2g6I0c9d9xgcStPy4Crh5Nr1qdoP8f/bbKzjRRpO+8IIIA
B+75KKPaBsHTIDNcN4Ut1W4xNTD2Va6NCxHk5LTjgVCWgQkPULtdyvRdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMdmGdjnsdDNbm0jRCBRPb5EKPEMB8GA1UdIwQY
MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt
NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4
LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUhDUskl
p4q86Vr71F/aE8wK81cr6cvha14HcP4FkApjjyIAvbVrodPsQa/p5xMvdZAY7S5m
PGKGmB5i8lPlhreM+D2T0mpkAXO/+iQeqGYkHQgnSMTkEVsGWjkfBWTGcSF8QKTe
OhzNEUxC3MGugbDpPH/a7486hlz7rLOZRZpcqTMnZHw2NiwRlwU4sWwFL5wXmF/e
FLz06zThkQOEg6Q9wwXv9F47fU4LjRosrkIUVvwxoEc9NrwbFGG8JJ9pE+b2/rP8
rZ2DcfK4uaXTxKJ6mL05V2GLsIrn2HVCmcGls0BZ7TEnLxZ3Bp7tmaqDyFdJze0R
9g721qljvnmVkw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:31 2026 by rpki-client